LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 03-07-2004, 02:35 PM   #16
Valgar
Member
 
Registered: Feb 2004
Posts: 65

Original Poster
Rep: Reputation: 15

Now i have tried to disable the firewall at all and at least "nmap ipnumber" say that there's that machine.
But if i digit "nmap hostname" it give me "failed to resolve hostname/ip"
Maybe is some configuration of mine?
I have made the hostname and host zeroconf at the same name....
 
Old 03-07-2004, 05:57 PM   #17
lnxconvrt
Member
 
Registered: Mar 2002
Location: Houston
Distribution: FC3, Manrake 10.x, various others at times
Posts: 113

Rep: Reputation: 18
/etc/hosts

Making up a simple example:

2 hosts on lan, 1 linux box called fred at 192.168.0.10 and 1 called george (Win or Lin, doesn't matter for this example) at 192.168.0.15, subnet mark 255.255.255.0, so both on same subnet.

Add to the linux box's /etc/hosts file the line 192.168.0.15 george (or 192.168.0.15 george.fullyqualifieddomainname george if you have a dns domain).

Now you should be able to ping george from the linux box and find george.

I think that "fish://..." and maybe "smb://..." will depend on host resolution. However, I think that lisa is supposed to find other hosts on the network by actively looking, so there may be other issues as well.
 
Old 03-07-2004, 06:15 PM   #18
Valgar
Member
 
Registered: Feb 2004
Posts: 65

Original Poster
Rep: Reputation: 15
After a fresh install of mdk 9.2 in another pc i have at least resolved a thing.
Now i use the default configuration of lisa and if i write lan:/ i have lan://localhost/192.168.x.x and that's the router!
The strange thing is that the other pc now i see it...but with smb:// but it's not a win pc!
Hehe i think i'm near....and i think i screwed up some lisa configuration.
Like you say (i'm really really bad to network related problems...)i think its something related to hostnames....
Tomorrow after work i try various config and tell you the result.
For now i thank you for the patience
 
Old 03-08-2004, 12:20 PM   #19
Valgar
Member
 
Registered: Feb 2004
Posts: 65

Original Poster
Rep: Reputation: 15
I have tried to disable at all the mandrake firewall and write the file /etc/hosts with the ip number and hostname of my pc.
If i write in konqueror lan:/"nomehost" now i see the host but with some filesystem i can't connect...the only one seems samba and fish (that share the whole pc...);and if i enter in my pc i see my shared folder but only with the samba protocol!
I have made some mistake elsewhere??(i think so)
If it's the firewall that block anything how can i use my lan without disable the firewall?(i think enabling some ports...but don't know why and if they are secure ouside my pc...)
 
Old 03-08-2004, 10:21 PM   #20
lnxconvrt
Member
 
Registered: Mar 2002
Location: Houston
Distribution: FC3, Manrake 10.x, various others at times
Posts: 113

Rep: Reputation: 18
More specifics...

of your setup might help people to see clearly what the issue is. I think I follow what you're saying, but I'm not certain.

Try posting something more detailed and specific like "my router is at 192.168.1.1, host apple (Mandrake) is at 192.168.1.11, s/n mask 255.255.255.0, host pear is a WinXP box at 192...", and so on.

You can make up the host names if you don't want to reveal details...as long as it accurately represents the network.

Then post /etc/hosts, exactly what was type in Konqueror, and the specific result.

One thing: a windows share will be seen with "smb://..", not with "fish://..". The fish protocol is for hosts running ssh, smb for Windows hosts or Samba servers using the smb/cifs protocol.

Gotta get a few things done and get to bed...I'll try to check back sometime tomorrow.
 
Old 03-09-2004, 11:50 AM   #21
Valgar
Member
 
Registered: Feb 2004
Posts: 65

Original Poster
Rep: Reputation: 15
Ok heres the spec(masked ...but i think it's only for test)
My router is at 192.168.10.1
The win98 host Laura is at 192.168.10.3
The mandrake 9.2 host Turtle is at 192.168.10.2
And this pc,mandrake 9.1 host,Cow is at 192.168.10.4
All these host have the same subnet mask 255.255.155.0
My /etc/host file is:
127.0.0.1 localhost
192.168.10.2 Turtle
192.168.10.3 Laura
192.168.10.4 cow

So this same file is equal to /etc/host-allow and on /etc/host-deny is empty
The pc in some manner communicate (the smb protocol used by linneigborhood works...actually i use linneigborhood to share files under all the machine...so it's not a problem of subnetmask or similar....).
 
Old 03-11-2004, 12:26 AM   #22
lnxconvrt
Member
 
Registered: Mar 2002
Location: Houston
Distribution: FC3, Manrake 10.x, various others at times
Posts: 113

Rep: Reputation: 18
sorry, got busy

sometimes weekends are better for me .

So, given your last post, if you ought from Turtle to be able to "ssh Cow" or "ssh 192.168.10.4" and get to Cow. Same thing if you're at Cow: "ssh Turtle or "ssh 192.168.10.2" should get you there. If that works then "fish://..." in Konqueror should work. If not, check if the ssh daemon is running (sorry if I repeat something from earlier in the thread, it's late and I'm hurrying). From a shell "ps -ef|grep sshd" should show at least a line with /usr/sbin/sshd or similar. If not, /etc/init.d/sshd start probably would do the trick.

If ssh is running and you can't ssh to the box then either your router (as you suggested) or (more likely) the iptables firewall on the box needs to be adjusted. Most routers I don't think will block internal (LAN side) traffic, only traffic from the internet side. Probably checking whatever tools Mandrake has for adjusting the boxes' firewalls will do the trick if you can't ssh.

Sounds like from your comment about lin neighborhood the smb sharing is working. But does the smb share now show up in "lan:/" in Konqueror. You do realize that you'll only have ssh/fish to the Mandrake boxes unless you've setup Samba on them?

In general I have a better idea of your network, maybe post back if you can get ssh/fish to work and, if so, what you can then see in "lan:/".

I tend to not turn on the firewall on my internal machines. I use port forwarding on my router to forward the few ports I let through from the internet and any one services running inside I want to be available to the machines on my local network.

HTH.
 
Old 03-11-2004, 01:14 PM   #23
Valgar
Member
 
Registered: Feb 2004
Posts: 65

Original Poster
Rep: Reputation: 15
if i disable the firewall i can ssh fish smb and all the stuff i think....
But i don't want to disable firewall 'cause i have my work files :P (i have a router that do firewall....but i want a firewall in my linux box also!)...so i don't know what port to open and if they are secure.....i want them only on my lan and not in internet.
 
Old 03-11-2004, 02:01 PM   #24
/bin/bash
Senior Member
 
Registered: Jul 2003
Location: Indiana
Distribution: Mandrake Slackware-current QNX4.25
Posts: 1,802

Rep: Reputation: 47
The file /etc/services usually has all the ports listed.
Code:
Ssh uses 22
ssh             22/tcp                          # SSH Remote Login Protocol
ssh             22/udp                          # SSH Remote Login Protocol
Samba uses 137-139
netbios-ns	137/tcp				# NETBIOS Name Service
netbios-ns	137/udp
netbios-dgm	138/tcp				# NETBIOS Datagram Service
netbios-dgm	138/udp
netbios-ssn	139/tcp				# NETBIOS session service
netbios-ssn	139/udp
I'm not familiar with fish?
 
Old 03-11-2004, 04:25 PM   #25
Valgar
Member
 
Registered: Feb 2004
Posts: 65

Original Poster
Rep: Reputation: 15
Thanks!
Do you know where i can obtain information if these ports are secure or not?
Some sort of "book of permitted ports over a network"....
 
Old 03-11-2004, 07:24 PM   #26
/bin/bash
Senior Member
 
Registered: Jul 2003
Location: Indiana
Distribution: Mandrake Slackware-current QNX4.25
Posts: 1,802

Rep: Reputation: 47
The ports are secure if the server that is running on them is secure. For instance if you are running openssh then you would keep an eye out for any openssh related bullitins. And if you are running samba you should keep samba up to date and always install the security related patches and updates.

If you are running only on a lan then you should set your firewall to only open the ports for IP's you expect to see on the lan.

There are many other security issues you should familiarize yourself with in time, but those basic steps will get you started. And of course read the documentation for any server you decide to run on your lan.
 
Old 03-11-2004, 10:30 PM   #27
lnxconvrt
Member
 
Registered: Mar 2002
Location: Houston
Distribution: FC3, Manrake 10.x, various others at times
Posts: 113

Rep: Reputation: 18
ports not forwarded by your router/firewall...

are not open to the internet. /bin/bash has given you some good pointers about ports (if you don't like to read /etc/services then try a Google search for common ports).

In summary, forward with the router's firewall only those ports that you want to be accessible from the internet. The rest are not a problem UNLESS someone cracks one of the boxes on your private network. Even if they do, there's not a problem that a firewall can address if you don't have a service listening on the port. Turn off services that you don't want; blocking with a firewall those that you do want running makes them inaccessible and makes no sense.

If you don't trust your router's firewall then you can also turn on the individual boxes' firewalls and allow only local traffic to the ports that you want open. It's just a matter of finding out what ports the services you want to run need to have open.
 
Old 03-12-2004, 04:08 PM   #28
Valgar
Member
 
Registered: Feb 2004
Posts: 65

Original Poster
Rep: Reputation: 15
Ok i think i have to read many web-pages
Thanks,now i know that i block all my service with the firewall...and the bad configuration of the services makes the rest.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Surf by IP mhykgyver Linux - Networking 2 09-18-2005 08:46 AM
no http - can't surf the_cranky_don Linux - Networking 2 05-05-2005 06:57 PM
LAN client can surf but not ping ? Biased turkey Mandriva 8 01-19-2005 08:48 PM
How to surf the lan? Valgar Linux - General 2 03-03-2004 06:57 PM
i can see my LAN but i can't surf the INternet, HELP maturola Linux - Networking 8 11-06-2003 01:35 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 07:20 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration